Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. A heap buffer overflow vulnerability exists in Advantech WebAccess. A local attacker could exploit this vulnerability to execute arbitrary code, which could also result in a denial of service...

Advantech EKI Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-344-01A Advantech EKI Vulnerabilities that was published December 15, 2015, on the NCCIC/ICS-CERT web site. --------- Begin Update B Part 1 of 3 -------- HD Moore of Rapid7 identified several vulnerabilities in...

CVE-2014-9208

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

Stack overflow

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-9208

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-9208

CVE-2014-9208 affects Advantech WebAccess/SCADA, involving multiple stack-based buffer overflows in ASPVCObj ActiveX controls (AspDataDriven/UpdateProject) that can be exploited remotely via crafted web pages to achieve code execution in the context of the logged-in user. Technical details in con...

CVE-2014-9208: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

PT-2015-3052

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.0.1 Description The issue is caused by multiple stack-based buffer overflows in unspecified DLL files. This allows a remote attacker to execute arbitrary code via unknown vectors. Recommendations For...

Advantech WebAccess Buffer Overflow Vulnerability (CNVD-2015-05943)

WebAccess HMI/SCADA is software that provides remote control and management. Multiple stack buffer overflow vulnerabilities exist in the Advantech WebAccess application, which can be exploited by remote attackers to cause the application to crash and execute arbitrary code...

Advantech WebAccess 8.0, 3.4.3 ActiveX - Multiple Vulnerabilities

Exploit for windows platform in category dos / poc Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API i...

Advantech Webaccess 8.0 / 3.4.3 - ActiveX Multiple Vulnerabilities

Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API in ASPVCOBJLib.AspDataDriven ActiveX. Operating...

Advantech WebAccess 8.0, 3.4.3 ActiveX - Multiple Vulnerabilities

Exploit for windows platform in category dos / poc Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API i...

Advantech WebAccess 8.0 / 3.4.3 Code Execution

Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API in ASPVCOBJLib.AspDataDriven ActiveX. Operating...

Advantech WebAccess < 7.0-2011.12.20 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess7020111220.nbin...

Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess7020090629.nbin...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7220140730.nbin...

Advantech WebAccess < 7.0-2011.08.27 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7020110827.nbin...

Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess7220131114.nbin...

Advantech EKI Hard-coded SSH Keys Vulnerability

OVERVIEW Independent researcher Neil Smith has identified a hard-coded SSH key vulnerability in Advantech’s EKI-122X series products. Advantech has produced new firmware to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Advantech reports that the...

Advantech WebAccess Stack-Based Buffer Overflow Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a stack-based buffer overflow vulnerability in Advantech’s WebAccess application. Advantech has produced a new version to mitigate this vulnerability. Ivan Sanchez has tested the new version to validate that it resolves the vulnerability...